Method for assisting a motor vehicle

Abstract

A method of assisting a motor vehicle driven in an at least semiautomated manner, for passing through a tunnel. The method includes: receiving surrounding-area signals that represent an area, which surrounds the motor vehicle, and of which at least a part includes a tunnel; receiving safety condition signals, which represent at least one safety condition that must be satisfied, so that the motor vehicle may be assisted from outside of the motor vehicle while passing through the tunnel; checking if the at least one safety condition is satisfied; generating data signals, which represent data suitable for assisted traversal of the tunnel by the motor vehicle, based on the surrounding-area signals, and based on a result of whether the at least one safety condition is satisfied; outputting the generated data signals. A device, a computer program, and a machine-readable storage medium are also described.

Claims

1. A method of assisting a motor vehicle driven in an at least semiautomated manner, for passing through a tunnel, the method comprising the following steps: receiving surrounding-area signals that represent an area, which surrounds the motor vehicle and of which at least a part includes the tunnel; receiving safety condition signals, which represent at least one safety condition that must be satisfied, so that the motor vehicle may be assisted from outside of the motor vehicle while passing through the tunnel; checking whether the at least one safety condition is satisfied; generating data signals, which represent data suitable for assisted traversal of the tunnel by the motor vehicle, based on the surrounding-area signals, and based on a result of whether the at least one safety condition is satisfied; and outputting the generated data, wherein the at least one safety condition is, in each instance, an element selected from the following groups of safety conditions: presence of a predetermined safety integrity level or automotive safety integrity level of at least the motor vehicle and an infrastructure including a communication path and/or communications components, for controlling a motor vehicle remotely; presence of a maximum latency time of a communication between the motor vehicle and a remote control device for controlling the motor vehicle remotely based on the remote control signals; presence of a predetermined computer protection level of a device for executing the steps of the method; presence of predetermined components and/or algorithms and/or communication options, which are used for executing the steps of the method; presence of redundancy and/or diversity in predetermined components and/or algorithms and/or communication options, which are used for executing the steps of the method; presence of predetermined availability information, which indicates an availability of predetermined components and/or algorithms and/or communication options; presence of predetermined quality criteria of the predetermined components and/or algorithms and/or communication options; presence of a plan, which includes: (i) measures for reducing faults, and/or (ii) measures in response to failures of predetermined components and/or algorithms and/or communication options, and/or (iii) measures for incorrect analyses, and/or (iv) measures in response to incorrect interpretations; presence of one or more fallback scenarios; presence of a predetermined function; presence of a predetermined traffic situation; presence of predetermined weather; maximum possible time for a specific performance or execution of at least one of the steps of the method; presence of a test result, that elements or functions, which are used for executing the method, are presently functioning correctly.

2. The method as recited in claim 1, wherein the data include a driving requirement that the motor vehicle is supposed to follow.

3. The method as recited in claim 2, wherein the driving requirement includes remote control commands for controlling a lateral and/or longitudinal guidance of the motor vehicle remotely.

4. The method as recited in claim 2, further comprising: processing the surrounding-area signals to detect a collision object situated within a predetermined distance after a tunnel entrance or after a tunnel exit, based on a direction of travel of the motor vehicle; wherein, in response to the detection of the collision object, the driving requirement includes an emergency braking.

5. The method as recited in claim 4, wherein the collision object is a further vehicle.

6. The method as recited in claim 1, further comprising: processing the surrounding-area signals to detect a collision object situated within a predetermined distance after a tunnel entrance or after a tunnel exit, based on a direction of travel of the motor vehicle; wherein, as a function of the detection, the data include information that the collision object has or has not been detected.

7. The method as recited in claim 6, wherein the collision object is a further motor vehicle.

8. A device for assisting a motor vehicle driven in an at least semiautomated manner, for passing through a tunnel, the device configured to: receive surrounding-area signals that represent an area, which surrounds the motor vehicle and of which at least a part includes the tunnel; receive safety condition signals, which represent at least one safety condition that must be satisfied, so that the motor vehicle may be assisted from outside of the motor vehicle while passing through the tunnel; check whether the at least one safety condition is satisfied; generate data signals, which represent data suitable for assisted traversal of the tunnel by the motor vehicle, based on the surrounding-area signals, and based on a result of whether the at least one safety condition is satisfied; and output the generated data signals, wherein the at least one safety condition is, in each instance, an element selected from the following groups of safety conditions: presence of a predetermined safety integrity level or automotive safety integrity level of at least the motor vehicle and an infrastructure including a communication path and/or communications components, for controlling a motor vehicle remotely; presence of a maximum latency time of a communication between the motor vehicle and a remote control device for controlling the motor vehicle remotely based on the remote control signals; presence of a predetermined computer protection level of a device for executing the steps of the method; presence of predetermined components and/or algorithms and/or communication options, which are used for executing the steps of the method; presence of redundancy and/or diversity in predetermined components and/or algorithms and/or communication options, which are used for executing the steps of the method; presence of predetermined availability information, which indicates an availability of predetermined components and/or algorithms and/or communication options; presence of predetermined quality criteria of the predetermined components and/or algorithms and/or communication options; presence of a plan, which includes: (i) measures for reducing faults, and/or (ii) measures in response to failures of predetermined components and/or algorithms and/or communication options, and/or (iii) measures for incorrect analyses, and/or (iv) measures in response to incorrect interpretations; presence of one or more fallback scenarios; presence of a predetermined function; presence of a predetermined traffic situation; presence of predetermined weather; maximum possible time for a specific performance or execution of at least one of the steps of the method; presence of a test result, that elements or functions, which are used for executing the method, are presently functioning correctly.

9. A non-transitory machine-readable storage medium on which is stored a computer program for assisting a motor vehicle driven in an at least semiautomated manner, for passing through a tunnel, the computer program, when executed by a computer, causing the computer to perform the following steps: receiving surrounding-area signals that represent an area, which surrounds the motor vehicle and of which at least a part includes the tunnel; receiving safety condition signals, which represent at least one safety condition that must be satisfied, so that the motor vehicle may be assisted from outside of the motor vehicle while passing through the tunnel; checking whether the at least one safety condition is satisfied; generating data signals, which represent data suitable for assisted traversal of the tunnel by the motor vehicle, based on the surrounding-area signals, and based on a result of whether the at least one safety condition is satisfied; and outputting the generated data signals, wherein the at least one safety condition is, in each instance, an element selected from the following groups of safety conditions: presence of a predetermined safety integrity level or automotive safety integrity level of at least the motor vehicle and an infrastructure including a communication path and/or communications components, for controlling a motor vehicle remotely; presence of a maximum latency time of a communication between the motor vehicle and a remote control device for controlling the motor vehicle remotely based on the remote control signals; presence of a predetermined computer protection level of a device for executing the steps of the method; presence of predetermined components and/or algorithms and/or communication options, which are used for executing the steps of the method; presence of redundancy and/or diversity in predetermined components and/or algorithms and/or communication options, which are used for executing the steps of the method; presence of predetermined availability information, which indicates an availability of predetermined components and/or algorithms and/or communication options; presence of predetermined quality criteria of the predetermined components and/or algorithms and/or communication options; presence of a plan, which includes: (i) measures for reducing faults, and/or (ii) measures in response to failures of predetermined components and/or algorithms and/or communication options, and/or (iii) measures for incorrect analyses, and/or (iv) measures in response to incorrect interpretations; presence of one or more fallback scenarios; presence of a predetermined function; presence of a predetermined traffic situation; presence of predetermined weather; maximum possible time for a specific performance or execution of at least one of the steps of the method; presence of a test result, that elements or functions, which are used for executing the method, are presently functioning correctly.

Description

BRIEF DESCRIPTION OF THE DRAWINGS

(1) FIG. 1 shows a flow chart of an example method according to the first aspect of the present invention.

(2) FIG. 2 shows an example device according to the second aspect of the present invention.

(3) FIG. 3 shows a machine-readable storage medium in accordance with an example embodiment of the present invention.

(4) FIG. 4 shows a tunnel in accordance with an example embodiment of the present invention.

DETAILED DESCRIPTION OF EXAMPLE EMBODIMENTS

(5) FIG. 1 shows a flow chart of an example method in accordance with the present invention for assisting a motor vehicle driven in an at least semiautomated manner, for passing through and/or while passing through a tunnel. The example method includes the following steps:

(6) receiving 101 surrounding-area signals that represent an area, which surrounds the motor vehicle, and of which at least a part includes a tunnel;

(7) receiving 103 safety condition signals, which represent at least one safety condition that must be satisfied, so that the motor vehicle may be assisted from outside of the motor vehicle while passing through the tunnel;

(8) checking 105 if the at least one safety condition is satisfied; generating 107 data signals, which represent data suitable for assisted traversal of the tunnel by the motor vehicle, based on the surrounding-area signals, and based on a result of whether the at least one safety condition is satisfied;

(9) outputting 109 the generated data signals.

(10) According to one specific embodiment of the present invention, the data include a driving requirement, which the motor vehicle is supposed to follow.

(11) According to one specific embodiment of the present invention, the driving requirement includes remote control commands for controlling a lateral and/or longitudinal guidance of the motor vehicle remotely.

(12) According to one specific embodiment of the present invention, the method according to the first aspect includes controlling a lateral and/or longitudinal guidance of the motor vehicle remotely on the basis of the remote control commands.

(13) According to one specific embodiment of the present invention, the result as to whether the at least one safety condition is satisfied, indicates that the at least one safety condition is or is not satisfied.

(14) In one specific embodiment of the present invention, the data signals are only generated, if the result as to whether the at least one safety condition is satisfied, indicates that the at least one safety condition is satisfied.

(15) If the at least one safety condition is not satisfied, then, for example, the generation of data signals is refrained from.

(16) For example, the driving requirement only includes remote control commands for controlling a lateral and/or longitudinal guidance of the motor vehicle remotely, if the result as to whether the at least one safety condition is satisfied, indicates that the at least one safety condition is satisfied. Alternatively, the driving requirement does not include remote control commands for controlling a lateral and/or longitudinal guidance of the motor vehicle remotely.

(17) Therefore, this means, in particular, that the remote control of a lateral and/or longitudinal guidance of the motor vehicle is refrained from, if the at least one safety condition is not satisfied.

(18) In one specific embodiment of the present invention (not shown), a tunnel infrastructure transmits the data signals and/or, in particular, the surrounding-area signals and/or, in particular, the safety condition signals to the motor vehicle. For example, the motor vehicle analyzes the data, that is, the surrounding-area signals and/or safety condition signals, itself and ascertains, for example, itself, the driving instructions necessary and/or needed for passing through the tunnel and continues driving (in particular, temporarily), for example, guided in an at least semiautomated manner, on the basis of the necessary driving instructions.

(19) FIG. 2 shows a device 201 in accordance with an example embodiment of the present invention.

(20) Device 201 is configured to execute all of the steps of the method according to the first aspect of the present invention.

(21) Device 201 includes an input 203, which is configured to receive the surrounding-area signals and the safety condition signals.

(22) Device 201 further includes a processor 205, which is configured to execute the checking step and the generating step.

(23) For example, processor 205 is configured to determine, based on the surrounding-area signals, that a motor vehicle intends to pass through a tunnel.

(24) Device 201 further includes an output 207, which is configured to output the data signals generated.

(25) According to one specific embodiment of the present invention, for example, outputting the generated data signals includes transmitting the data signals over a communications network, in particular, over a wireless communications network, to the motor vehicle.

(26) Processor 205 is configured, for example, to process the surrounding-area signals, in order to detect a motor vehicle situated in a surrounding area of the tunnel. For example, in response to the detection of a motor vehicle situated in the surrounding area of the tunnel, processor 205 is configured to determine that a motor vehicle intends to pass through the tunnel.

(27) In general, signals, which are received, are received with the aid of input 203. Thus, input 203 is configured, in particular, to receive the corresponding signals.

(28) In general, signals, which are outputted, are outputted with the aid of output 207. Thus, output 207 is configured, in particular, to output the corresponding signals.

(29) According to one specific embodiment of the present invention, a plurality of processors are provided in place of the one processor 205.

(30) According to one specific embodiment of the present invention, processor 205 is configured to execute the generating and/or checking and/or determining steps described above and/or in the following.

(31) According to one specific embodiment of the present invention, device 201 is part of an infrastructure, in particular, cloud infrastructure, for example, part of a tunnel infrastructure.

(32) FIG. 3 shows a machine-readable storage medium 301 in accordance with an example embodiment of the present invention.

(33) A computer program 303 is stored in machine-readable storage medium 301; the computer program including commands, which, in response to execution of the computer program by a computer, cause it to implement a method according to the first aspect of the present invention.

(34) According to one specific embodiment of the present invention, device 201 includes a remote control device, which is configured to control a lateral and/or longitudinal guidance of motor vehicles remotely on the basis of the remote control commands. Thus, this means, in particular, that the remote control device is configured, in particular, to control the motor vehicle remotely on the basis of the remote control commands, that is, to control the lateral and/or longitudinal guidance of the motor vehicle on the basis of the remote control commands.

(35) FIG. 4 shows a tunnel 401 in accordance with an example embodiment of the present invention.

(36) A first motor vehicle 403 and a second motor vehicle 405 wish to travel through tunnel 401, driven in an at least semiautomated manner.

(37) In a specific embodiment not shown, for example, one of these motor vehicles 403, 405 may travel through tunnel 401, driven manually by a driver.

(38) A direction of travel of first motor vehicle 403 is indicated symbolically by an arrow having the reference numeral 407.

(39) A direction of travel of second motor vehicle 405 is indicated symbolically by an arrow having the reference numeral 409.

(40) Based on directions of travel 407, 409, tunnel 401 includes a tunnel entrance 411 and a tunnel exit 413.

(41) Tunnel 401 includes a tunnel infrastructure 415.

(42) Tunnel infrastructure 415 includes a plurality of video cameras 417, each having one video sensor (not shown), which monitor an interior of tunnel 401, tunnel exit 413 and tunnel entrance 411.

(43) In one specific embodiment of the present invention (not shown), for example, further surround sensors are provided in place of, or in addition to, the video sensors of video cameras 417.

(44) In the spirit of the description, a surround sensor is generally one of the following surround sensors: radar sensor, lidar sensor, ultrasonic sensor, magnetic field sensor, infrared sensor, and video sensor, in particular, video sensor of a video camera.

(45) Tunnel infrastructure 415 includes two traffic lights 419, which control traffic at tunnel entrance 411.

(46) Tunnel infrastructure 415 further includes device 201 according to FIG. 2.

(47) Tunnel infrastructure 415 further includes a first wireless communications interface 421, which is situated in front of tunnel entrance 411 with respect to directions of travel 407, 409.

(48) Tunnel infrastructure 415 further includes second wireless communications interface 423, which is situated inside of tunnel 401, that is, in the interior of tunnel 401.

(49) Tunnel infrastructure 415 includes a third wireless communications interface 421, which is situated after tunnel exit 413 with respect to directions of travel 407, 409.

(50) Tunnel infrastructure 415 further includes a cloud infrastructure 429. In a specific embodiment not shown, it is provided that device 201 be part of cloud infrastructure 429.

(51) Method steps of the example method according to the first aspect of the present invention may be executed, for example, in cloud infrastructure 429.

(52) The video signals of video cameras 417 are provided, for example, to device 201.

(53) These video signals are, for example, an example of surrounding-area signals.

(54) That is to say, in the spirit of the description, these video signals may be encompassed by surrounding-area signals.

(55) For example, for motor vehicles 403, 405, remote control commands for controlling a specific lateral and/or longitudinal guidance of these motor vehicles may be generated on the basis of these video signals.

(56) For example, with the aid of wireless communications interface 421, 423, 425, these remote control commands are transmitted over a wireless communications network to motor vehicles 403, 405.

(57) For example, in one specific embodiment of the present invention, the data, which are ascertained with the aid of processor 205, include signal pattern data that represent a signal pattern of traffic lights 419.

(58) Thus, this means, in particular, that the signal pattern of traffic lights 419 may be transmitted over the wireless communications network to the two motor vehicles 403, 405.

(59) This may produce, for example, the technical advantage that these motor vehicles 403, 405 may efficiently obtain knowledge about the signal pattern of traffic lights 419.

(60) For example, in response to detection of a collision object inside of tunnel 401 on the basis of the processing of the video signals, traffic lights 419 are controlled in such a manner, that they output an optically red signal, in order to signal optically to the two motor vehicles 403, 405, that they must stop.

(61) This may advantageously allow, for example, a collision with the collision object to be prevented in an efficient manner.

(62) One condition for generating the data signals in conformance with the method according to the first aspect is, in particular, that the at least one safety condition is satisfied.

(63) For example, for controlling motor vehicles 403, 405 remotely, a latency time for transmitting the remote control commands over the wireless communications network with the aid of wireless communications interfaces 421, 423, 425 must be less than or less than or equal to a predetermined threshold latency time value.

(64) For example, a motor vehicle, which may be controlled remotely on the basis of remote control commands, must have a predetermined safety integrity level.

(65) According to one specific embodiment of the present invention, a condition for controlling the lateral and/or longitudinal guidance of motor vehicles remotely, that is, in particular, for controlling the lateral and/or longitudinal guidance of motor vehicle 403, 405 remotely, is that the remote control is safe. In the spirit of the description, “safe” means, in particular, “safe” and “secure.” Actually, these two English terms are normally translated into German as “sicher”. Nevertheless, these have a partially different meaning in English.

(66) The term “safe” is directed, in particular, to the topic of accident and accident prevention. Remote control, which is “safe,” causes, in particular, a probability of an accident or a collision to be less than or less than or equal to a predetermined threshold probability value.

(67) The term “secure” is directed, in particular, to the topic of computer protection and/or hacker protection, that is, in particular, how securely is an (a) (computer) infrastructure and/or a communications infrastructure, in particular, a communication path between a motor vehicle and a remote control device for controlling a motor vehicle remotely, protected from unauthorized access and/or from data manipulation by a third party (hacker).

(68) Thus, remote control, which is “secure,” has, in particular, appropriate and sufficient computer protection and/or hacker protection as a basis.

(69) For example, according to one specific embodiment of the present invention, it is tested if the entity made up of a motor vehicle and infrastructure involved in the method according to the first aspect, including communication between the infrastructure and the motor vehicle, is currently secure for the plan, “intervention in the motor vehicle for critical actions, specific application: tunnel” described here. Therefore, this means, in particular, that the motor vehicle and/or a local and/or a global infrastructure and/or communication are appropriately tested. The data signals, in particular, the remote control signals, are generated, in particular, on the basis of a result of the testing.

(70) Thus, this means, in particular, that the components, which are used during the execution of the method according to the first aspect, are tested for safety, that is, as to whether these satisfy specific safety conditions, before the intervention in the vehicle operation is carried out, that is, before the motor vehicle is controlled remotely.

(71) Important or dependent criteria include, for example, one or more of the safety conditions described above.

(72) According to one specific embodiment of the present invention, first of all, the overall system (motor vehicle, infrastructure, for example, tunnel infrastructure, communication path, cloud, . . . ) is tested with regard to the safety condition.

(73) According to one specific embodiment of the present invention, the individual parts are also tested with regard to satisfying the safety condition. This, in particular, prior to the remote control of the motor vehicle.

(74) In this context, in one specific embodiment of the present invention, the testing step(s) are executed inside the motor vehicle and/or outside the motor vehicle, in particular, in an infrastructure, for example, tunnel infrastructure.

(75) According to one specific embodiment of the present invention, the checking step(s) are tested subsequently, that is, at a later time, for example, at regular intervals. For example, the testing step(s) are tested subsequently at a predetermined frequency, for example, every 100 ms.

(76) For example, according to one specific embodiment of the present invention, this testing, that is, the test as to whether the at least one safety condition is satisfied, takes place prior to and/or after and/or during one or more predetermined method steps.

(77) According to one specific embodiment of the present invention, the testing is carried out or executed in response to problems.